Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
File: ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft (raw, json)
Hash identifier: /8VDEHGLjZ98tCgnZouUwL0rRGfYQL3YG6FVroxX0EE=
Subject key identifier: 5C:EC:CF:30:1F:8B:8A:C9:70:99:4F:18:C9:0C:0C:C5:70:EC:DF:E6
Authority key identifier: 10:2B:C9:8D:33:27:09:52:53:41:30:AF:B4:DE:69:6D:8C:34:02:15
Certificate issuer: /CN=102bc98d33270952534130afb4de696d8c340215
Certificate serial: 019A725CBA8019DDB79EBDBFB18DCEC18842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECvJjTMnCVJTQTCvtN5pbYw0AhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
Manifest number: 0711
Signing time: Tue 11 Nov 2025 10:01:10 +0000
Manifest this update: Tue 11 Nov 2025 10:01:10 +0000
Manifest next update: Wed 12 Nov 2025 10:01:10 +0000
Files and hashes: 1: 1SfNvqGgo1qML8I5aKV28i3iaWs.roa (hash: pMgk3yqfYUxUqHeyCSRb0WlafuNDjwlQN8z3HdRW4rk=)
2: ECvJjTMnCVJTQTCvtN5pbYw0AhU.crl (hash: 3gn1LhzRkAre8HTMpt188nLmHNacngjxvwgcs/iFdig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECvJjTMnCVJTQTCvtN5pbYw0AhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ba:80:19:dd:b7:9e:bd:bf:b1:8d:ce:c1:88:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102bc98d33270952534130afb4de696d8c340215
Validity
Not Before: Nov 11 10:01:10 2025 GMT
Not After : Nov 12 10:01:10 2025 GMT
Subject: CN=5ceccf301f8b8ac970994f18c90c0cc570ecdfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:e4:ba:85:0f:34:e1:58:50:6e:b8:bd:4f:
d0:5e:36:48:58:1c:fa:d3:c0:f9:47:9e:ee:7b:17:
c8:40:f6:fa:bd:1a:80:48:29:50:21:d0:e0:c0:d9:
7a:e1:a7:e9:43:db:d0:8f:04:39:d6:2d:23:3a:81:
7b:07:27:b2:3e:db:89:9e:31:89:55:33:75:00:14:
55:7c:7c:dc:36:69:67:aa:9b:01:f7:00:3e:0a:a4:
ec:f8:ac:2e:cc:da:0f:4e:a3:47:8a:d8:a3:41:7e:
2f:cd:df:b4:29:f2:0f:56:ed:23:52:76:df:e0:42:
fc:62:25:39:53:55:98:eb:f3:66:d1:9b:3a:f3:e2:
b2:0f:51:49:b0:cc:b0:ae:b4:c7:6d:37:6c:45:3d:
69:75:89:9e:15:ec:dd:da:97:b1:4e:30:3f:bc:6a:
0b:0d:aa:de:6e:5a:c0:72:76:72:1f:12:90:de:58:
2b:ab:2b:5d:92:4d:63:3f:cf:59:9b:c8:2e:1e:41:
b5:e7:a1:d3:92:7a:00:c8:3d:72:b1:ea:06:17:d6:
86:58:1b:15:17:6b:5e:a7:dd:6b:68:bc:ee:17:af:
b0:d9:68:c9:26:b4:fc:d8:4f:ac:ad:5c:9e:a4:6f:
ed:47:c9:17:98:f3:21:86:38:95:70:9d:e2:55:5f:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EC:CF:30:1F:8B:8A:C9:70:99:4F:18:C9:0C:0C:C5:70:EC:DF:E6
X509v3 Authority Key Identifier:
keyid:10:2B:C9:8D:33:27:09:52:53:41:30:AF:B4:DE:69:6D:8C:34:02:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECvJjTMnCVJTQTCvtN5pbYw0AhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b6:69:5a:ab:21:98:27:0f:53:fd:11:87:c6:07:e5:5b:d2:
82:88:e5:b8:1c:5e:69:0f:95:18:3e:07:78:14:f1:88:7d:ed:
a4:d6:e6:bb:ba:47:ce:6e:f5:7a:2b:94:14:15:cb:24:e2:ff:
45:96:30:b2:8a:2b:3c:84:37:98:dc:d5:9a:19:28:86:3c:ff:
33:f6:87:de:9b:21:ac:b2:0c:e3:7c:19:40:e5:11:53:11:5e:
55:8b:53:56:16:03:90:74:2f:48:1c:21:69:dc:28:70:9e:d5:
27:96:c6:9c:44:67:8e:c7:64:86:69:55:77:4b:02:3b:b6:00:
8a:10:4f:f7:ba:45:06:0f:35:b9:88:34:31:4b:83:84:b8:ca:
79:5a:e4:45:8a:73:5c:aa:79:ee:1d:47:e7:07:60:23:c9:6a:
2f:2d:02:7f:82:10:1b:f5:69:83:e4:b8:66:ca:f2:df:5c:1e:
cc:9b:29:7d:53:89:89:d4:67:a0:b5:73:56:69:15:5b:29:96:
58:ba:16:72:79:a5:de:7d:99:11:8d:79:4a:5b:8f:21:a3:19:
40:74:70:28:0a:3b:0c:1b:7e:51:62:00:20:7a:a4:9c:5c:ea:
af:bd:4b:b6:78:c4:90:33:07:62:25:c5:04:27:7d:08:58:ae:
d6:90:79:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:45 2025 by rpki-client